Worm attack on Drilling Control system

A new HMI type machine on a drilling network was introduced without AV software by a third party drilling company. This machine was also not fully patched. This was against standard procedures. Other machines on the same network had not received the latest patch. The HMI was also infected with a worm which caused the control system to be infected by the worm. This led to loss of view of the drilling control network; however, operations were suspended at the time of the incident for modifications to the drilling asset. Therefore, impact to operations was negligible

Negligible, as operations had already been suspended for other reasons.